Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
File: GZgd6LdyA5RZREi3oOYlwzo43GY.mft (raw, json)
Hash identifier: 2uj0mFfNtDfyOK0i3YvJYSb1QaQvhYKGmaaX7GoTqyM=
Subject key identifier: 47:70:95:1E:90:91:9C:16:CD:17:0D:8D:21:F6:53:4B:E0:1B:BE:44
Authority key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
Certificate issuer: /CN=19981de8b7720394594448b7a0e625c33a38dc66
Certificate serial: 0197B7454E2DC1E469118EACE27D539A0E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
Manifest number: 0155
Signing time: Sat 28 Jun 2025 16:01:01 +0000
Manifest this update: Sat 28 Jun 2025 16:01:01 +0000
Manifest next update: Sun 29 Jun 2025 16:01:01 +0000
Files and hashes: 1: GZgd6LdyA5RZREi3oOYlwzo43GY.crl (hash: aXt6pGqII8VqMRMiB7ehK/D5BbqFiFGplvxodPAHwGI=)
2: rJMIHQLkxom4E-e7Qy3aYsdGMVA.roa (hash: Fg5t4xG81KRwBzgiOaCNb7xH+qvhUM++MTkXaN72cEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:4e:2d:c1:e4:69:11:8e:ac:e2:7d:53:9a:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19981de8b7720394594448b7a0e625c33a38dc66
Validity
Not Before: Jun 28 16:01:01 2025 GMT
Not After : Jun 29 16:01:01 2025 GMT
Subject: CN=4770951e90919c16cd170d8d21f6534be01bbe44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:06:60:2d:57:9c:7e:c6:0f:9c:c0:74:18:
0c:be:13:9d:c7:a7:93:78:b4:27:e4:09:df:76:2e:
b5:7e:d4:81:34:e7:9d:74:1c:70:48:f6:ce:0d:d8:
78:86:f9:7e:09:7e:9e:88:4c:d6:78:e1:24:be:92:
f9:06:20:45:b0:ca:98:45:bf:20:e8:6b:1d:e1:00:
a9:55:3c:ec:46:a3:75:fd:2b:49:9d:b2:ff:36:a0:
43:f1:b3:5d:f9:14:42:6b:c3:07:d1:9b:d1:44:09:
25:50:5e:d4:42:7f:66:b0:78:9f:65:e9:fd:cd:fb:
39:67:fe:d3:bd:f6:6a:f2:70:0b:06:5a:f1:15:54:
1d:ac:80:98:12:cd:47:43:ee:04:44:2e:f8:c5:90:
d0:7d:64:ce:5f:ad:f0:52:27:90:e7:2a:da:ff:c5:
60:ba:8c:c6:b4:ac:7d:89:24:e3:2c:77:4f:59:bf:
09:f6:63:e9:76:9b:7d:dc:1b:ea:1e:67:f5:9b:c1:
3f:62:6d:09:00:0f:d6:53:8a:91:0c:0e:ee:5f:f3:
15:3a:a0:bc:54:4f:98:0e:32:15:96:0c:b5:7d:c9:
09:30:a0:de:3c:3a:bf:3b:53:bb:70:d3:fe:fb:70:
af:a0:78:f1:b1:05:76:fd:7f:76:c0:ff:54:b3:ee:
1b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:70:95:1E:90:91:9C:16:CD:17:0D:8D:21:F6:53:4B:E0:1B:BE:44
X509v3 Authority Key Identifier:
keyid:19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4b:ac:db:96:f5:37:2b:1e:13:7e:c5:32:af:76:4a:7b:11:
49:51:13:85:52:76:c8:0b:0a:57:f8:cc:f0:86:5c:3e:60:ff:
0a:5f:4f:62:49:d9:72:3e:9a:57:4d:97:8e:05:db:55:8f:d9:
c8:7e:bb:1f:46:67:22:54:e7:8b:ab:38:ad:d0:fa:28:65:92:
68:49:bb:12:d5:3a:91:11:67:55:85:85:98:fc:02:79:30:b0:
23:f3:df:77:3a:29:83:54:fe:be:2f:b5:97:7f:71:1a:55:99:
43:38:b7:77:8a:7a:5b:f5:5b:a1:28:45:02:04:d2:c3:36:13:
74:8a:6a:1f:e5:bc:fc:ae:25:36:3c:0d:47:0c:75:5b:5a:b5:
76:61:2c:62:78:c5:35:2e:ed:3c:71:21:d4:6f:92:57:29:46:
00:d4:f3:39:d5:8b:20:6f:7b:00:d1:17:43:8b:43:32:2d:07:
6e:75:31:1d:c5:35:06:96:a0:53:ae:65:43:99:14:c3:8e:99:
33:29:9f:96:98:12:24:35:18:ca:d8:ad:55:ce:e1:05:53:c6:
49:73:a7:8d:9f:ff:5c:6b:7a:c7:fe:e6:de:df:fd:cc:3c:1d:
64:91:46:07:89:3a:93:96:3e:30:f5:9f:ff:a3:b3:63:6b:2a:
d6:11:8a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:07 2025 by rpki-client